Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          3zZmv4BpsWjZ2xHAzhuFsEDfeUVO6cJofL02ELobYwY=
Subject key identifier:   A9:E2:B8:5C:FB:98:9F:C4:29:CB:4F:76:35:48:22:CC:9A:12:B7:D7
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       0196BCDBAD6D1D2B70D68B5F82AA60D6F961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          10AB
Signing time:             Sun 11 May 2025 01:00:35 +0000
Manifest this update:     Sun 11 May 2025 01:00:35 +0000
Manifest next update:     Mon 12 May 2025 01:00:35 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: bPzfUORmWRy5TPuAhyjWkEEs3Lbs+2BsjgjpDKQXFjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:ad:6d:1d:2b:70:d6:8b:5f:82:aa:60:d6:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: May 11 01:00:35 2025 GMT
            Not After : May 12 01:00:35 2025 GMT
        Subject: CN=a9e2b85cfb989fc429cb4f76354822cc9a12b7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:33:2a:72:dc:52:0a:0a:72:cb:34:e8:ce:
                    c1:5c:f2:35:77:71:21:8d:04:05:f3:83:37:41:5a:
                    69:da:ea:4c:40:2a:5c:67:22:54:9f:cc:81:b0:04:
                    dc:76:6a:e3:a1:fb:ec:94:d4:72:2d:0f:f6:71:35:
                    db:66:da:bd:92:0e:61:34:af:3f:c5:7a:0d:be:7c:
                    9c:7f:f2:98:ba:86:f8:5e:1e:53:2b:95:c6:f6:6b:
                    56:2c:e8:c3:f8:d6:05:cd:89:19:7e:d2:ce:8e:cb:
                    21:fb:d7:00:73:2a:96:98:71:f2:c7:f4:b0:b9:b2:
                    3a:58:63:b4:f4:79:de:de:eb:58:2d:48:55:15:94:
                    3a:dc:02:70:6b:e0:cf:1d:b4:a9:cc:f1:a9:3b:be:
                    c9:13:6d:33:db:bd:9c:02:d8:9d:5c:0a:5a:17:3a:
                    d1:ae:f9:31:27:ad:03:44:4f:a5:a6:04:c0:01:ca:
                    c3:c7:6d:15:83:34:3e:fa:09:f1:86:97:b4:07:4a:
                    56:81:03:e5:e0:49:92:54:9c:10:e0:be:d3:4e:1f:
                    47:a1:85:40:15:cf:5c:bc:2d:b4:9b:9c:43:ec:26:
                    86:05:81:36:41:87:1e:d3:e7:e9:e8:ff:48:eb:18:
                    58:b9:2e:4e:32:85:56:3c:6b:3d:e2:93:28:66:80:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E2:B8:5C:FB:98:9F:C4:29:CB:4F:76:35:48:22:CC:9A:12:B7:D7
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:0e:49:8d:87:a1:e1:be:69:5c:f3:ae:cc:12:70:04:16:
         a3:9f:27:05:7a:0e:6b:f7:1b:65:91:f5:29:24:84:27:a9:10:
         e1:69:d2:7c:a3:31:61:e7:31:1b:71:a4:ab:ec:0a:af:2d:58:
         76:d5:94:63:a8:ef:8d:ea:62:f8:37:8e:15:95:21:1e:48:9d:
         4b:f9:9b:3c:3d:3b:4c:6d:cd:90:06:48:65:ba:bd:5c:d8:00:
         42:55:12:8c:74:38:23:53:d0:c1:c0:dd:38:c9:5b:c8:b6:4a:
         23:97:c7:01:07:1e:11:48:91:81:0a:5d:7e:f2:de:4c:df:13:
         21:c3:06:fa:92:43:10:c3:cb:96:80:e0:53:ee:df:1f:2c:58:
         67:cd:8e:f7:5c:83:af:37:df:28:27:64:c0:46:25:5b:49:be:
         59:f4:6f:e0:6b:6b:af:ba:87:59:00:e6:45:31:73:80:8f:00:
         04:fb:9e:33:9b:cf:c9:fa:b5:06:92:ce:54:87:c8:ed:87:d1:
         94:3d:af:a6:09:4f:db:99:48:25:03:0a:06:b9:ad:4d:58:3d:
         7b:2d:46:7d:f8:9c:36:11:92:33:5d:d2:2c:8e:98:4b:21:91:
         c3:cc:86:b9:2d:7f:cf:b6:19:3f:55:21:02:c7:23:20:94:08:
         fa:84:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:33:46 2025 by rpki-client